PT-2021-15320 · F5 · Big-Ip Asm+1
Published
2021-03-31
·
Updated
2021-04-05
·
CVE-2021-22993
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x through 16.0.1.0
BIG-IP Advanced WAF and BIG-IP ASM versions 15.1.x through 15.1.1
BIG-IP Advanced WAF and BIG-IP ASM versions 14.1.x through 14.1.2
BIG-IP Advanced WAF and BIG-IP ASM versions 13.1.x through 13.1.3.5
BIG-IP Advanced WAF and BIG-IP ASM versions 12.1.x through 12.1.5.2
Description
The issue is related to DOM-based XSS on the DoS Profile properties page.
Recommendations
For versions 16.0.x, update to version 16.0.1.1 or later.
For versions 15.1.x, update to version 15.1.2 or later.
For versions 14.1.x, update to version 14.1.3.1 or later.
For versions 13.1.x, update to version 13.1.3.6 or later.
For versions 12.1.x, update to version 12.1.5.3 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Big-Ip Asm
Big-Ip Advanced Waf